The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · git.kernel.org

Timeline

Detection, updates, and resolution for this record.

1. Nov 3, 2023 · NIST NVD

   Detected

   The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

2. Oct 15, 2026 · NIST NVD

   Updated

   The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

Affected

• cpe linux/linux kernelversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2023-47233

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-47233

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2023-47233

  The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is r

  nvd.nist.gov

References

• Issue Tracking · bugzilla.suse.com
• Reference · git.kernel.org
• Reference · lists.debian.org
• Reference · lists.debian.org
• Mailing List · lore.kernel.org
• Mailing List · marc.info